| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2018-07-27 | |||
| 00:17:08 | dansmith | rm_work: I get that it says libvirt there, but... | |
| 00:17:35 | johnsom | dansmith We force require it as the metadata service was swiss cheese and blew up if you booted more than a few instances at a time | |
| 00:17:35 | rm_work | if that's not "file injection" then I don't know | |
| 00:17:39 | dansmith | rm_work: the rest of the spec is talking about file injection specifically, which has nothing to do with config drive and is all about violating the very sanctity of the image by forcing large things into small holes | |
| 00:18:10 | rm_work | err | |
| 00:18:16 | penick | rm_work what's generating the secrets that you're putting into the instance? (amphora vms?) | |
| 00:18:16 | rm_work | so *are we using file injection or not*? | |
| 00:18:22 | dansmith | I'm serious, you should totes read the spec :) | |
| 00:18:27 | rm_work | I read the spec | |
| 00:18:41 | rm_work | several sections more than once | |
| 00:18:52 | rm_work | so obviously whatever you're hinting at, i'm not going to get | |
| 00:18:57 | johnsom | Yeah, the terminology in that spec is super confusing compared to the nova API and client API | |
| 00:19:14 | dansmith | that's the point of the first #1 bullet | |
| 00:19:14 | rm_work | this whole conversation started because I asked "is what we are doing the deprecated file injection" and multiple people said "yes" | |
| 00:19:40 | dansmith | users can't know whether they will get the files they send, because either the deployment may have actual injection disabled (the default), | |
| 00:19:40 | rm_work | which #1 bullet, there are several | |
| 00:19:53 | dansmith | or they may have disabled config drive (the other way to get these files) | |
| 00:19:59 | dansmith | rm_work: I said the first :) | |
| 00:20:05 | rm_work | (in fact, I DID notice something new by re-reading -- that SECTION has two, rofl) | |
| 00:20:36 | openstackgerrit | Merged openstack/nova master: conf: Add '[neutron] physnets' and related options https://review.openstack.org/564440 | |
| 00:20:43 | dansmith | let me try to restate this whole thing | |
| 00:21:03 | dansmith | and if that doesn't help, then I'll leave and you can keep your torches and pitchforks for whatever you want | |
| 00:21:25 | dansmith | in the olden times, | |
| 00:21:32 | dansmith | there was a feature called "file injection" | |
| 00:21:38 | dansmith | there are two halves of said feature: | |
| 00:21:59 | dansmith | 1. The API (personality files) by which people provide this data which may get ignored if config is unfriendly | |
| 00:22:29 | johnsom | Anyhow, any change we can bump that max size of user-data up to a floppy size? Is it just the API limitation and a DB column alter, or is cloud-init going to need to spin too? | |
| 00:22:35 | dansmith | 2. The actual injection part, where the virt driver (some not all) could inject files into images forcibly, literally by taking a hard-coded partition number, and writing over it with your data | |
| 00:22:37 | dansmith | are you with me? | |
| 00:22:45 | dansmith | config drive didn't exist at this point | |
| 00:24:03 | dansmith | aight, I guess nobody wants to hear my story | |
| 00:24:13 | rm_work | i'm trying to parse it | |
| 00:24:27 | dansmith | which part? | |
| 00:24:42 | rm_work | so, file-injection IS what we're using, correct? so right now, we are using both halves of this? | |
| 00:24:47 | dansmith | no, | |
| 00:24:51 | dansmith | you're using the first part, | |
| 00:24:52 | rm_work | or this was just the past, and it's changed now, and you're getting to that | |
| 00:24:56 | dansmith | and another part I haven't gotten to yet | |
| 00:25:00 | rm_work | k | |
| 00:25:23 | dansmith | the #2 part is the really nasty bit, which has been disabled by default, and which we _actually_ want to be rid of | |
| 00:25:44 | dansmith | however, the first part is problematic because we don't store it and it breaks several of our other features (agree to disagree on this) | |
| 00:25:54 | dansmith | so, in the middle ages, long before you showed up, | |
| 00:25:59 | dansmith | this config_drive thing was created | |
| 00:26:14 | dansmith | which was a way to avoid the metadata server's restrictions, complication, whatever | |
| 00:26:47 | dansmith | apparently when we create that the first time, we also put those files in there (TIL) | |
| 00:27:08 | dansmith | but we can't re-create it later, which is the #2 part of the spec problem section | |
| 00:27:10 | dansmith | so, | |
| 00:27:33 | dansmith | you're using the API part, and the config drive part, but not the actual injection thing which is the most smelly bit | |
| 00:27:35 | rm_work | ha, right, which is funny because the #2 "problem" is actually WHY we chose this method | |
| 00:27:45 | dansmith | fine, but whatever | |
| 00:27:55 | rm_work | ok so if #2 was the bad part, and that's just not done anymore... why is the first part being removed? | |
| 00:28:17 | dansmith | #2 is related to the API not the really bad part | |
| 00:28:41 | rm_work | err | |
| 00:28:46 | rm_work | sorry, PART 1 and 2 | |
| 00:29:21 | dansmith | the API part is bad because it takes arbitrary files and then kind keeps track of them, until a rebuild or something and then we lose them | |
| 00:29:25 | rm_work | per "1. The API (personality files) by which people provide this data" and "the #2 part is the really nasty bit, which has been disabled by default, and which we _actually_ want to be rid of" | |
| 00:29:36 | rm_work | hmmm | |
| 00:29:49 | dansmith | the #2 part is the libvirt injection partition thing | |
| 00:29:52 | dansmith | sorry | |
| 00:29:56 | dansmith | eff, | |
| 00:30:04 | rm_work | yeah | |
| 00:30:05 | dansmith | this straightening isn't going well | |
| 00:30:21 | rm_work | so right, #2 part (libvirt) isn't even done anymore | |
| 00:30:25 | rm_work | now it puts things into config-drvie | |
| 00:30:28 | rm_work | which is ... fine? | |
| 00:30:41 | rm_work | it's just that nova then loses track of that data, which you consider bad (but we don't) | |
| 00:31:01 | rm_work | (and it has worked that way for a while?) | |
| 00:31:19 | dansmith | okay, you know, it's after 5pm and I'm getting more frustrated here, so I'm just going to go | |
| 00:31:26 | rm_work | kk | |
| 00:31:36 | rm_work | prolly just discussing at the PTG is best | |
| 00:32:21 | Ileixe | Hello guys | |
| 00:33:37 | Ileixe | Recently I implement custom hooking code for server create api in nova-api by hook api. | |
| 00:33:59 | johnsom | My take away. There was some nasty bit taking files and making some strange partition at boot. We aren't using that and never have. Then there is the bit that takes files, stashes them in the config drive and cloud-init drops them in the guest filesystem. This what we use. However to remove the partition stuff the config drive part got removed too | |
| 00:35:16 | Ileixe | Oh sorry there was converstation in now. Never mind. I ask later | |
| 00:35:39 | rm_work | Ileixe: we are ... wrapped up on that :P | |
| 00:35:40 | rm_work | it's fine | |
| 00:35:41 | rm_work | lol | |
| 00:37:20 | Ileixe | Thanks rm_work :) just simple qeustion. I found hook api was deprecated, and the api was the right thing for my logic, so i wonder what replace hook api | |
| 00:57:41 | melwitt | argh, looks like we have a new gate failure as of today | |
| 00:57:55 | melwitt | http://logstash.openstack.org/#/dashboard/file/logstash.json?query=message:%5C%22Unsupported%20VIF%20type%20unbound%20convert%20'_nova_to_osvif_vif_unbound'%5C%22%20AND%20tags:screen-n-cpu.txt&from=7d | |
| 00:58:58 | melwitt | unless it's only the numa-aware-vswitches patches that are affected... looking closer | |
| 01:04:45 | melwitt | it's hitting several of the numa-aware-vswitches patches but is hitting other patches as well. started very recently | |
| 01:07:55 | openstackgerrit | Xiaohan Zhang proposed openstack/nova master: compute node local_gb_used include swap disks https://review.openstack.org/585928 | |
| 01:44:17 | mriedem | melwitt: i was noticing those randomly the last couple of weeks | |
| 01:44:21 | mriedem | unless it's major, just recheck | |
| 01:45:03 | melwitt | mriedem: oh, logstash was claiming it started today. and I was wondering if it might be related to https://review.openstack.org/522537 | |
| 01:45:43 | melwitt | I've rechecked the numa patches at least twice because of it so far. maybe it's a coincidence. I'll keep trying to recheck | |
| 01:46:42 | mriedem | hmm, yeah it might be, mostly hitting on the live migration and multinode jobs | |
| 01:46:48 | mriedem | which is where that is turned on | |
| 01:47:00 | mriedem | well that would be...awesome | |
| 01:47:09 | mriedem | can you report a neutron bug? | |
| 01:47:29 | melwitt | that patch landed at 13:00 (my time) which coincides with the logstash start of hits | |
| 01:48:07 | melwitt | mriedem: can do. was just writing it up for nova not realizing it's neutron. will copy it over and open for neutron | |
| 01:48:59 | mriedem | it could be either | |
| 01:49:01 | mriedem | just add both | |
| 01:49:09 | melwitt | oh, right. we can do that | |
| 01:49:23 | mriedem | Kevin_Zheng: fyi, might need to see if zhaobo can investigate this ^ | |
| 01:49:37 | mriedem | mlavalle is already gone for the day | |
| 01:49:54 | Kevin_Zheng | ACK, I will ask him | |
| 01:50:06 | mriedem | melwitt: there would be an easy way to disable it in nova if needed | |